Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12a67f25-9ca7-3b15-9d12-a76e238c0a61.roa
File:                     12a67f25-9ca7-3b15-9d12-a76e238c0a61.roa (raw, json)
Hash identifier:          k3RzVDxnoJFBw2Z23puUOS+KUz+k9ftiCt1SU/6z2U8=
Subject key identifier:   75:F9:84:A7:D5:30:AA:C8:94:D7:D4:C1:80:55:83:DF:07:2E:D5:9D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F538291DB119EB6DB3C9CD82E
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12a67f25-9ca7-3b15-9d12-a76e238c0a61.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.27.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:82:91:db:11:9e:b6:db:3c:9c:d8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=cf9d0bb7-2f4e-4244-ba1a-b6956dd8c858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:27:26:5b:64:02:7b:7d:b2:3b:0c:22:28:
                    c8:fb:b2:1b:93:28:85:d5:0a:bc:96:d4:b6:41:75:
                    9b:82:31:ce:73:3e:e6:45:74:a6:06:fd:97:1f:59:
                    7d:10:7a:23:87:45:18:85:08:40:cb:cd:43:c3:4c:
                    13:5f:91:93:ea:56:02:9c:d1:04:9d:df:68:c4:e4:
                    f9:cf:70:97:f3:a3:5c:1b:8e:50:1a:83:1e:eb:1d:
                    51:6d:e3:57:5e:b4:6d:c7:ce:c8:3f:f9:fd:55:10:
                    b9:5c:03:e8:4f:48:60:6a:6b:64:fc:92:8f:19:c7:
                    66:95:13:a6:05:05:65:0e:b4:c0:eb:5d:eb:f3:65:
                    1b:2c:dc:60:e3:03:5b:ec:b4:4b:8f:00:aa:18:21:
                    f0:71:33:f7:13:76:f1:90:b5:cb:f1:4e:be:46:66:
                    c8:66:d8:01:d4:fa:91:b4:6d:90:c5:4f:d5:a4:ac:
                    8c:53:31:8a:4f:86:14:56:8e:cb:bd:27:e5:79:16:
                    36:fd:d4:1f:91:f1:60:b1:e3:38:52:ee:e0:56:28:
                    61:34:fd:88:85:18:09:ed:d8:ca:03:6d:e6:4b:97:
                    ff:84:02:de:ff:d6:fb:d9:e8:9e:43:66:37:d9:ef:
                    e5:84:fa:4a:e4:14:30:a6:09:e4:61:c3:d7:a4:08:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:84:A7:D5:30:AA:C8:94:D7:D4:C1:80:55:83:DF:07:2E:D5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12a67f25-9ca7-3b15-9d12-a76e238c0a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:dc:4e:a1:4f:9a:d8:f1:80:5b:59:e6:c3:4c:47:68:5e:f7:
         99:d0:e1:d6:61:6d:a7:e2:a7:c2:75:41:2d:4a:bf:fe:12:ac:
         f0:97:6c:25:ed:39:f1:5a:f7:f1:77:ae:a3:b6:f0:0d:f8:00:
         23:58:22:96:d7:c6:85:8c:36:a9:0a:5d:6a:c6:74:9d:da:e1:
         3b:d4:61:01:fe:d1:ef:ff:ca:f2:2f:9c:ac:53:11:a6:3f:0f:
         b0:9e:6c:0d:f1:8b:b9:47:a6:61:69:3c:83:16:14:5a:cd:42:
         56:17:ac:2b:81:fe:72:77:4f:50:7b:f5:28:a0:21:4e:e8:b0:
         8a:78:5a:68:8e:e4:28:13:f6:b6:94:c1:01:07:2e:4b:d8:b9:
         75:4c:a9:8e:d9:e3:f8:42:75:82:b9:33:50:1d:7a:ed:0a:55:
         67:f9:2a:b0:a4:78:bf:4c:6f:ba:22:b0:a2:33:2f:29:60:cf:
         12:e8:ae:2b:44:9c:11:90:6e:7f:10:30:c0:a8:32:4d:b6:c3:
         f2:e8:60:4f:ea:dc:be:78:3a:ca:74:00:42:1f:22:15:f6:e6:
         c7:b4:42:ab:a5:ea:15:85:0e:5f:93:c0:91:c7:44:e0:69:a5:
         36:fd:fe:b4:00:6c:a2:1f:96:2d:28:d5:7b:3e:07:35:10:da:
         62:17:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:28 2025 by rpki-client